Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.cer (raw, json)
Hash identifier: 14hZep49x75itScqcY6HcyugPhd2ZLPQhlHdSpDdsoc=
Subject key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF260859873F99F7E471C74B120F16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 159.0.0.0/16
IP: 185.139.8.0/22
IP: 212.215.128.0/17
IP: 2a10:800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:26:08:59:87:3f:99:f7:e4:71:c7:4b:12:0f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:47:5c:91:97:b7:33:1a:45:fd:37:f4:84:
33:c0:92:49:1b:8e:23:e9:da:b1:83:a5:19:18:af:
4c:ac:55:5f:4d:98:98:b0:56:36:42:de:23:de:8e:
81:dd:5e:46:be:31:63:b9:2b:f7:d4:2d:d4:af:ce:
cb:50:d4:7d:93:61:6a:11:3f:8f:85:2a:ac:73:1e:
0d:74:87:04:0b:48:cc:71:09:01:c5:c9:2b:38:47:
1c:e5:69:64:96:f8:27:52:20:5a:24:e4:b2:60:37:
8d:fe:b1:dd:0b:77:89:2e:b2:f7:7c:5d:b7:f2:a7:
d6:a9:77:60:c4:ae:8f:e9:1e:fd:56:9c:48:76:ac:
66:32:d4:83:3f:79:8b:a7:38:41:11:90:12:81:03:
4d:58:f3:20:76:4a:ff:81:94:f5:3b:82:af:5b:db:
45:47:c7:39:83:25:31:5f:f6:1e:7d:9d:2d:d9:af:
21:b1:c6:c4:1c:21:bb:97:ec:30:a7:f1:b6:0e:ef:
c8:71:9e:5e:b3:c1:af:8a:b9:53:1c:3e:a6:20:89:
56:08:0e:67:74:be:33:08:12:79:38:9b:26:9c:1c:
d0:5b:50:f0:8b:a2:1e:4d:0e:24:99:59:04:0d:03:
dc:8b:2e:60:2e:61:96:02:f4:54:d9:45:68:ad:08:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.0.0.0/16
185.139.8.0/22
212.215.128.0/17
IPv6:
2a10:800::/29
Signature Algorithm: sha256WithRSAEncryption
35:a4:56:c7:a2:90:26:83:30:39:a0:8a:da:d5:3c:b4:99:5e:
42:1f:a8:a3:38:c4:f9:fe:eb:d2:15:7d:fb:df:35:76:e0:d0:
14:91:5b:73:d7:5f:f2:3b:7b:a4:d2:de:e0:41:53:bb:0b:ca:
2e:b9:f8:ea:63:cf:20:87:4f:c1:34:96:48:f3:3e:ce:a2:25:
66:7f:2a:ae:3e:73:f8:a4:0a:5a:f7:ba:1c:b6:5c:71:b1:fe:
77:6e:1f:c5:38:88:81:55:5f:63:6d:56:08:2e:05:ed:58:72:
9a:84:79:2d:ec:34:4d:a4:5a:97:cb:d0:d5:5f:c2:b3:1e:9b:
5f:8e:b5:db:d8:0a:7b:25:a7:d9:1a:eb:06:18:bb:ff:06:7f:
d8:ee:98:f1:a0:57:5a:6e:fb:0f:1b:15:de:9c:76:15:02:b9:
8c:a6:d3:27:23:dd:a5:d7:08:d6:ba:f5:cf:0b:8f:e1:ef:be:
1b:26:7f:4d:03:95:e1:ab:50:88:6e:58:84:3c:af:e0:f8:49:
5e:92:4d:a0:59:1c:44:9b:9f:8c:3c:28:80:19:9a:a1:dd:cb:
d7:1f:b8:cf:71:b5:51:a8:d3:62:63:25:70:23:a9:81:63:88:
88:86:27:b1:ba:5c:42:d1:48:2d:7c:52:5f:da:76:74:c0:ec:
a6:6a:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:14:02 2024 by rpki-client on console-fra.rpki-client.org